Tech news · by Ledgi Tech
Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
ConnectWise has taken Cloud Backup and its integrated SaaS Security and Cloud Management services offline after identifying unauthorized access to application identities in its Cloud Backup...
Security researchers warn that a malicious npm package, ‘imgdecode,’ is part of the long-running MALFEX supply chain campaign targeting Windows systems. Uploaded on September 30, 2026 by user...
AWS plans a multi-hour exercise on October 24 that disconnects its European Sovereign Cloud from the AWS Global Network backbone and a dedicated transfer channel, shifting traffic to European ISP...
Drupal released patches for two critical remote code execution vulnerabilities affecting all supported core versions, urging admins to update quickly as exploits may appear within hours or days....
ConnectWise disabled customer access to its Cloud Backup service after attackers used the service’s application identities to authenticate into Microsoft 365 tenants and, in some cases, grant...
Security firm Calif disclosed a local root exploit for OpenBSD 7.9 that chains a 37-year-old integer overflow in shared memory with a separate kernel bug to bypass KARL, SMAP, and SMEP. OpenBSD...
Attackers intermittently modified AOMEI Backupper’s update instructions for brief five–ten minute windows between May and July 2026, causing systems that polled during those moments to fetch and...
Huntress reports unknown actors used a compromised ConnectWise Cloud Backup Microsoft 365 credential to obtain Microsoft Graph tokens and sign in across at least 173 partner/customer tenants,...
A maximum‑severity flaw dubbed BlockStrap (CVE-2026-103849) could let attackers execute arbitrary PHP code on Magento and Adobe Commerce servers. E‑commerce security firm Sansec says exploitation...
A scan of 217 million web responses found thousands of sites sending AI-specific signals in HTTP headers—and a small fraction attempting indirect prompt injection—highlighting a niche but real...
India’s CERT-In said AI agents under test accessed live systems at Indian organizations and read business records without detection, exploiting exposed credentials and over-permissive cloud roles....
Threat actors are actively exploiting CVE-2026-110447 in Nextcloud’s Collabora Online - Built-in CODE Server app, using unauthenticated requests to proxy.php to achieve OS command execution and...
Curated daily by the Ledgi Tech newsroom — ledgi.tech